Backdrop CMS 1.20.0 - Multiple Cross-Site Request Forgery Vulnerability

Exploit Title: Backdrop CMS 1.20.0 - 'Multiple' Cross-Site Request Forgery CSRF Exploit Author: V1n1v131r4 Vendor Homepage: https://backdropcms.org/ Software Link: https://github.com/backdrop/backdrop/releases/download/1.20.0/backdrop.zip Version: 1.20.0 Tested On: Kali Linux, Ubuntu 20.04...

The UK Is Secretly Testing a Controversial Web Snooping Tool

The country passed its Investigatory Powers Act in 2016. Now, its building what could be the most powerful data collection system used by any democratic nation...

Contact Tracing COVID-19 Infections via Smartphone Apps

Google and Apple have announced a joint project to create a privacy-preserving COVID-19 contact tracing app. Details, such as we have them, are here. It's similar to the app being developed at MIT, and similar to others being described and developed elsewhere. It's nice seeing the privacy...

Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly

With the consul ruby gem before 1.0.3, if a controller checks multiple powers using :if or :except conditions, these conditions are erroneously applied to all power checks in that controller. This can lead to skipped power checks and hence unauthenticated access to certain controller actions...

GHSA-8JHX-9GF4-HHF5 Consul gem insufficient authentication check - Multiple powers in one controller are not always checked correctly

With the consul ruby gem before 1.0.3, if a controller checks multiple powers using :if or :except conditions, these conditions are erroneously applied to all power checks in that controller. This can lead to skipped power checks and hence unauthenticated access to certain controller actions...

Defining Counterintelligence

I've written about counterintelligence CI before, but I realized today that some of my writing, and the writing of others, may be confused as to exactly what CI means. The authoritative place to find an American definition for CI is the United States National Counterintelligence and Security...

How a national cybersecurity agency can help avoid a national cybersecurity quagmire

This last October we saw more countries than ever participate in initiatives to raise cybersecurity awareness. What was once largely a US approach has evolved into events and initiatives around the world by governments, civil society groups, and private sector partners. This increased breadth and...

Microsoft will Inform You If Government is Spying on You

Following in the footsteps of Twitter, Facebook and Google, Microsoft promises to notify users of its e-mail Outlook and cloud storage OneDrive services if government hackers may have targeted their accounts. The company already notifies users if an unauthorized person tries to access their Outlo...

Government Could Hack Children's Toys to Spy on You

Smartphones, Smart TVs, Smart Watches, Cell Phone Towers, Messaging services… but now, What's Next? Smart Toys? Yes, probably. Tech expert is warning that 'Smart Toys' could now be used by the government intelligence agencies to spy on suspects. As part of the Investigatory Powers Bill, children'...

UK Prime Minister wants to Ban Encrypted Messaging Apps

The terrible terrorist attacks in France forced the British Prime Minister David Cameron to consider banning the popular encrypted online messaging apps like Snapchat, CryptoCat, WhatsApp and Apple’s iMessage unless the companies don't give the UK government backdoor access to their encrypted...

National Security Letters Challenged in Ninth Circuit Court

In the Ninth Circuit Court in San Francisco Wednesday morning, the Electronic Frontier Foundation’s EFF Kurt Opsahl urged the federal appeals court to uphold a lower court’s ruling that national security letters NSLs are unconstitutional. Regardless whether the ruling is upheld, the matter of NSL...

House Amendment Limits Funding for NSA Surveillance

The House of Representatives last night overwhelmingly passed an amendment to the Department of Defense Appropriations Act that would cut funding for two programs that grant intelligence agencies access to the private data and communications of U.S. citizens. The amendment shows that Congress is...

Secret warrant forced Google to hand over WikiLeaks Volunteer's Data to Feds

According to the court records released this week on web, The Justice Department used a secret search warrant to obtain the entire contents of a Gmail account used by a former WikiLeaks volunteers in Iceland. Smari McCarthy and Herbert Snorrason, are the two Icelandic freedom of information...

Internet Slows In Iran Following Attacks on Infrastructure, Communication

Hackers interrupted Internet access in various parts of the Islamic Republic of Iran yesterday after attacking a number of the country’s infrastructure and communications companies, a state official told the Reuters news agency. “Yesterday we had a heavy attack against the country’s infrastructur...

German Engineer Arrested In Card Skimming Plot

A German engineer was sentenced to three years in jail on Friday after he was found transporting card skimming technology into Britain according to a report from Reuters UK. Thomas Beeckmann, 26, was stopped at London’s Victoria Coach Station in June with 17 electronic scamming circuits. The...

Report: U.S. Needs Cyber Monroe Doctrine

A New Report from a Washington D.C. think tank with ties to the Obama Administration says the U.S. needs to overhaul its cyber security planning and issue a kind of Monroe Doctrine for cyber space to discourage attacks against U.S. interests. The report, “America’s Cyber Future: Security and...

Vodafone Network Seized by Egyptian Authorities to Spread Propaganda Via Text Message

Vodafone released a statement yesterday confirming that the authorities in Egypt seized their network to send propaganda text messages to the Egyptian people. Such text messages have been sent since the start of the protests in an attempt to cool tensions among the protestors who are demanding th...

FBI RSA Keynote To Focus On Cybercrime

Robert Mueller, Director of the Federal Bureau of Investigation, will deliver a keynote address at RSA Conference 2010 that will detail cyber threats through the years – from criminal threats like computer intrusions and identity theft to the use of the Internet by extremists and hostile foreign...